-
Notifications
You must be signed in to change notification settings - Fork 40
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #1 from stevespringett/master
update
- Loading branch information
Showing
21 changed files
with
850 additions
and
80 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
131 changes: 131 additions & 0 deletions
131
alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,131 @@ | ||
| /* | ||
| * This file is part of Alpine. | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"; | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| * | ||
| * Copyright (c) Steve Springett. All Rights Reserved. | ||
| */ | ||
| package alpine.filters; | ||
|
|
||
| import org.apache.commons.lang3.StringUtils; | ||
| import javax.servlet.Filter; | ||
| import javax.servlet.FilterChain; | ||
| import javax.servlet.FilterConfig; | ||
| import javax.servlet.ServletException; | ||
| import javax.servlet.ServletRequest; | ||
| import javax.servlet.ServletResponse; | ||
| import javax.servlet.http.HttpServletRequest; | ||
| import javax.servlet.http.HttpServletResponse; | ||
| import java.io.IOException; | ||
|
|
||
| /** | ||
| * BlacklistUrlFilter is a configurable Servlet Filter that can prevent access to | ||
| * specific URLs. The filter can either deny access or ignore access. Denials | ||
| * result in a HTTP 403 response whereas an ignore results in a HTTP 404 response. | ||
| * | ||
| * The filter may be used when specific files or directories should not be accessible. | ||
| * In the case of executable WARs, use of this filter is highly recommended since | ||
| * executable WARs must meet the requirements of both JAR and WAR files, thus placing | ||
| * compiled classes and their package structure inside the document webroot. | ||
| * | ||
| * Sample usage: | ||
| * <pre> | ||
| * <filter> | ||
| * <filter-name>BlacklistUrlFilter</filter-name> | ||
| * <filter-class>alpine.filters.BlacklistUrlFilter</filter-class> | ||
| * <init-param> | ||
| * <param-name>denyUrls</param-name> | ||
| * <param-value>/secretfolder</param-value> | ||
| * </init-param> | ||
| * <init-param> | ||
| * <param-name>ignoreUrls</param-name> | ||
| * <param-value>/org,/com,/us,/javax</param-value> | ||
| * </init-param> | ||
| * </filter> | ||
| * | ||
| * <filter-mapping> | ||
| * <filter-name>BlacklistUrlFilter</filter-name> | ||
| * <url-pattern>/*</url-pattern> | ||
| * </filter-mapping> | ||
| * | ||
| * </pre> | ||
| * | ||
| * @author Steve Springett | ||
| * @since 1.0.0 | ||
| */ | ||
| public final class BlacklistUrlFilter implements Filter { | ||
|
|
||
| private String[] denyUrls = {}; | ||
| private String[] ignoreUrls = {}; | ||
|
|
||
| /** | ||
| * Initialize "deny" parameter from web.xml. | ||
| * | ||
| * @param filterConfig A filter configuration object used by a servlet container | ||
| * to pass information to a filter during initialization. | ||
| */ | ||
| public void init(final FilterConfig filterConfig) { | ||
|
|
||
| final String denyParam = filterConfig.getInitParameter("denyUrls"); | ||
| if (StringUtils.isNotBlank(denyParam)) { | ||
| this.denyUrls = denyParam.split(","); | ||
| } | ||
|
|
||
| final String ignoreParam = filterConfig.getInitParameter("ignoreUrls"); | ||
| if (StringUtils.isNotBlank(ignoreParam)) { | ||
| this.ignoreUrls = ignoreParam.split(","); | ||
| } | ||
|
|
||
| } | ||
|
|
||
| /** | ||
| * Check for denied or ignored URLs being requested. | ||
| * | ||
| * @param request The request object. | ||
| * @param response The response object. | ||
| * @param chain Refers to the {@code FilterChain} object to pass control to the next {@code Filter}. | ||
| * @throws IOException | ||
| * @throws ServletException | ||
| */ | ||
| public void doFilter(final ServletRequest request, final ServletResponse response, final FilterChain chain) | ||
| throws IOException, ServletException { | ||
|
|
||
| final HttpServletRequest req = (HttpServletRequest) request; | ||
| final HttpServletResponse res = (HttpServletResponse) response; | ||
|
|
||
| final String requestUri = req.getRequestURI(); | ||
| if (requestUri != null) { | ||
| for (String url: denyUrls) { | ||
| if (requestUri.startsWith(url.trim())) { | ||
| res.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| return; | ||
| } | ||
| } | ||
| for (String url: ignoreUrls) { | ||
| if (requestUri.startsWith(url.trim())) { | ||
| res.setStatus(HttpServletResponse.SC_NOT_FOUND); | ||
| return; | ||
| } | ||
| } | ||
| } | ||
| chain.doFilter(request, response); | ||
| } | ||
|
|
||
|
|
||
| /** | ||
| * {@inheritDoc} | ||
| */ | ||
| public void destroy() { | ||
| } | ||
|
|
||
| } |
Oops, something went wrong.